Avast WEBforum

Other => Viruses and worms => Topic started by: iskefiyeli2004 on November 12, 2019, 10:29:08 PM

Title: Decrypt this files
Post by: iskefiyeli2004 on November 12, 2019, 10:29:08 PM
I need HELP for this
".id-DCCC8723.[admin@sectex.net].bot"
How can i Decrypt this files?
Quote
We have identified "Dharma (.cezar Family)". This ransomware is not decryptable!

Identified by:

ransomnote_email: admin@sectex.net
sample_extension: .id-<id>.[<email>].bot
Click here for more information about Dharma (.cezar Family).
Title: Re: Decrypt this files
Post by: Pondus on November 12, 2019, 10:48:24 PM
ID Ransomware  >>  https://id-ransomware.malwarehunterteam.com/

No More Ransom  >>  https://www.nomoreransom.org/en/index.html


Title: Re: Decrypt this files
Post by: polonus on November 12, 2019, 10:53:33 PM
Next to what Pondus proposed, here some more info and download link...

Dharma Decryptor download link can be found in here:
https://www.bleepingcomputer.com/news/security/kaspersky-releases-decryptor-for-the-dharma-ransomware/

Download link: https://www.bleepingcomputer.com/download/rakhnidecryptor-ransomware-decryptor/dl/348/

For avast free ransomeware decryptors go read here: https://blog.avast.com/avast-releases-four-free-ransomware-decryptors
(decryptor credits go to avast's Ladislav Zezula and Piotr Szczepanski)

polonus
Title: Re: Decrypt this files
Post by: iskefiyeli2004 on November 13, 2019, 09:18:21 AM
they not work i try them
Quote from: polonus on November 12, 2019, 10:53:33 PM
Next to what Pondus proposed, here some more info and download link...

Dharma Decryptor download link can be found in here:
https://www.bleepingcomputer.com/news/security/kaspersky-releases-decryptor-for-the-dharma-ransomware/

Download link: https://www.bleepingcomputer.com/download/rakhnidecryptor-ransomware-decryptor/dl/348/

For avast free ransomeware decryptors go read here: https://blog.avast.com/avast-releases-four-free-ransomware-decryptors
(decryptor credits go to avast's Ladislav Zezula and Piotr Szczepanski)

polonus
Quote from: Pondus on November 12, 2019, 10:48:24 PM
ID Ransomware  >>  https://id-ransomware.malwarehunterteam.com/

No More Ransom  >>  https://www.nomoreransom.org/en/index.html
Title: Re: Decrypt this files
Post by: Asyn on November 13, 2019, 09:33:11 AM
No backups..!? If so, you can only wait and hope for a future decryptor...
Title: Re: Decrypt this files
Post by: iskefiyeli2004 on November 13, 2019, 06:57:49 PM
Quote from: Asyn on November 13, 2019, 09:33:11 AM
No backups..!? If so, you can only wait and hope for a future decryptor...
i want to find and destroy, who made it.
Title: Re: Decrypt this files
Post by: Michael (alan1998) on November 13, 2019, 10:28:51 PM
Do you still have the file that started this?
Title: Re: Decrypt this files
Post by: iskefiyeli2004 on November 14, 2019, 01:15:49 PM
Quote from: Michael (alan1998) on November 13, 2019, 10:28:51 PM
Do you still have the file that started this?
not
Title: Re: Decrypt this files
Post by: Michael (alan1998) on November 14, 2019, 06:20:36 PM
Quote from: iskefiyeli2004 on November 14, 2019, 01:15:49 PM
Quote from: Michael (alan1998) on November 13, 2019, 10:28:51 PM
Do you still have the file that started this?
not

Unfortunately, there isn't anything we can do for you. Backups were your best bet. There have been rare instances were attackers have been reached and recovery keys stolen based off HWIDs (Which - I will note is illegal.) You can either hope someone finds/creates a decryptor, or restart from scratch.

Sorry Mate.